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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 

WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 
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- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )^ Responsive to communication(s) filed on 05 June 2006 . 
2a)E3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
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5) D Claim(s) is/are allowed. 
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8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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Attachment(s) 

1) [3 Notice of References Cited (PTO-892) 

2) EH Notice of Draftsperson's Patent Drawing Review (PTO-948) 

3) I3 Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 

Paper No(s)/Mail Date 06726706 . 



4) □ Interview Summary (PTO-413) 

Paper No(s)/Mail Date. . 

5) O Notice of Informal Patent Application (PTO-152) 

6) □ Other: . 



U.S. Patent and Trademark Office 
PTOL-326 (Rev. 7-05) 



Office Action Summary 



Part of Paper No./Mail Date 20060801 



Application/Control Number: 09/809,736 Page 2 

Art Unit: 2135 

DETAILED ACTION 
Response to Amendment 

This office action is in response to amendment filed on 06/05/06. Applicant amended 
Claims 1, and 9-13. The amendment filed on 06/05/06 have been entered and made of record. 
Therefore, presently pending claims are 1-3 and 5-13. 

Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claim 1, 3-6, and 9-13 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kimlinger et al (6,360,952 Bl) in view of Comerford et al (5,109,413), and further in view of 
Proust etal (6,216,014 Bl). 

In reference to claims 1, 9-13, Kimlinger discloses an access management system 
managing access to smart card a plurality applications (column 3 lines 37-38). The system 
responds to a request to access the smart card from an application (Fig. 4 A-I). 

However Kimlinger does not disclose the exclusive access of the smart card and allowing 
access when the smart card when the application has already been authenticated. 

Comerford discloses a system wherein the rights to execute software are conditional. On 
of the conditions to access software is the number of times of execution (column4 lines 21-26). 
By making a condition of execution of the software, the number of times that the software, when 
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the number of times for execution of the software is only 1 then there is exclusive access to the 
token and disk (smart card), since the counter would go to zero (column 19 lines 5-22). This 
would be exclusive access of the smart card because after the application has executed no other 
application will be allowed access since the counter would be zero, and therefore the conditions 
for execution, would not allow the application to execute. 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to include the conditions for execution as in Comerford in the system of 
Kimlinger. One of ordinary skill in the art would have been motivated to do this because it 
would provide the software vendor flexibility and therefore a return policy by being able to 
control the conditions of executing the software. 

Although Kimlinger discloses access management, and Comerford discloses access 
control to the smart card, neither Kimlinger nor Comerford disclose access control unit manages 
authentication between applications and the smart card using process Ids of the applications. 

Proust discloses a system wherein each object is also associated with a plurality of access 
control policy indicators each indicating, for one of the applications, which access policy to use 
with the application, the control access policy indicators being stored in the data memory 
(abstract). The application discloses a system wherein said access control unit manages 
authentication between applications and the smart card using process Ids (part 32 Fig. 3B) of the 
applications (column 12 lines 30-34). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the application process Ids to control access between applications and smart 
cards. One of ordinary skill in the art would have been motivated to do this because this would 
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enable the access control to be flexible and therefore tailored to the systems needs and easily 
changed for a specific user. 

In reference to claim 3, wherein the access control unit rejects the access request from the 
application allowed the exclusive access if the application has not been authenticated for the 
smart card. The system disclosed by Comerford authenticates the token and therefore would not 
allow access if the token was not authentic. 

Kimlinger does not disclose authentication of the token before the application executes. 

The access control unit disclosed by Comerford suggests rejecting the access request 
from the application allowed the exclusive access if the application has not been authenticated 
for the smart card (column 18 lines 9-25). The system disclosed by Comerford authenticates the 
token and therefore would not allow access if the token was not authentic 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to include the authentication of Comerford in the system of Kimlinger. One of 
ordinary skill in the art would have been motivated to do this because it would provide the 
software vendor flexibility and therefore a return policy by being able to control the conditions 
of executing the software. 

In reference to claim 4 wherein said access control unit manages authentication between 
an application and smart card using a process ID of the application. 

Kimlinger does not disclose the use of the process ID of the application to authenticate 
the application. 

Comerford suggest the use of the process ID of the application to manage the 
authentication between the application and the token (smart card) before execution. This is 
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performed the application looking for the execution criterion and would therefore need the 
process ID to identify the application (column 19 lines 4-12). 

In reference to claim 5, wherein said access control unit changes an application 
authenticated for a smart card into non-authenticated application when the smart card 
is extracted from a smart card reader (Fig. 4 C). Kimlinger discloses checking if there is a smart 
card in the reader before turning the smart card on, therefore suggesting that the smart card 
becomes non-authentic when it is extracted. 

In reference to claim 6, wherein when said application accesses the smart card plural 
times, said application issues the exclusive access request to said exclusion control unit each 
time the access is started, and issues an exclusive access cancellation notification to said 
exclusion control unit each time the access terminates (column 9 lines 26-32). 

Claim 2, 7-8 are rejected under 35 U.S.C. 103(a) as being unpatentable over Kimlinger 
and Comerford and further in view of Proust as applied to claim 1 above, and further in view of 
Silberschatz. 

In reference to claims 2 and 7, wherein the exclusion control unit queues an application 
that issues an exclusive access request in response an exclusive access request for the smart card 
from the application when the smart card has no logical channel exclusively accessed by another 
application. 

Kimlinger, Comerford, and Proust do not dislcoses the control unit queues an application 
that issues an access request. 
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Silberschatz discloses a monitor that uses a First Come First Serve Queue (FCFS) to 
control the access of one resource (pages 187-188). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use a queue to control the access of resources as disclosed by Silberschatz in the 
system of Kimlinger. One of ordinary skill in the art would have been motivated to do this 
because it would ensure that the process that waits the longest for the resource will be able to use 
it first. 

In reference to claim 8, wherein the access control unit request a smart card to cancel 
authentication an application, in response to a smart card authentication cancellation notification 
from when the application authenticated for the smart card smart authentication application, last 
application 

Kimlinger, Comerford, and Proust do not disclose the access control unit request a smart 
card to cancel authentication an application, in response to a smart card authentication 
cancellation notification from when the application authenticated for the smart card smart 
authentication application, last application 

Silberschatz discloses the release of a resource when the queue is ended and therefore the 
cancellation of the authentication application when the application is the last application (page 
187). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use a queue to control the access of resources as disclosed by Silberschatz in the 
system of Kimlinger. One of ordinary skill in the art would have been motivated to do this 
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because it would ensure that the process that waits the longest for the resource will be able to use 
it first. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

Chaneyetal 6,594,361 Bl 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paula W. Klimach whose telephone number is (571) 272-3854. 
The examiner can normally be reached on Mon to Thr 9:30 a.m to 5:30 p.m. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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Tuesday, August 01, 2006 



